Tools for Looking up Potentially Malicious Websites

Check out the free tools for looking up potentially malicious websites and cloud buckets online. Security analysts can use these free tools in their analysis to gain more deep insights.

• AbuseIPDB: Provides reputation data about the IP address or hostname
• Search Public Cloud Buckets: Search for Open Amazon s3 Buckets and their contents
• have i been pwned?: Check if your email or phone is in a data breach
• Auth0 Signals: Checks IP address reputation; supports API
• BrightCloud URL/IP Lookup: Presents historical reputation data about the website
• CheckPhish: Checks whether the URL is a fraudulent site
• Desenmascara.me: Flags websites suspected of selling counterfeit products
• Email Blocklist Checker: Checks the domain name or IP address against email blocklists (email address required, opts into marketing).
• FortiGuard lookup: Displays the URL's history and category
• Google Safe Browsing: Look up the website's current status
• hashdd: Provides historical data about IPs, URLs, etc.
• IBM X-Force Exchange: Provides historical data about IPs, URLs, etc.
• IPQualityScore: Presents a risk ranking for the IP address
• Joe Sandbox URL Analyzer: Examines the URL in real time
• Ironscales Fake Login URL Scanner: Examines the URL for signs of phishing
• Is It Hacked: Performs several checks in real time and consults some blacklists
• IsItPhishing: Assesses the specified URL in real-time
• Kaspersky Threat Intel Portal: Looks up the IP, URL, or domain in a blacklist
• Norton Safe Web: Presents historical reputation data about the website
• Palo Alto Networks URL Filtering: Looks up the URL in a blacklist
• PhishTank: Looks up the URL in its database of known phishing websites
• PolySwarm: Uses several services to examine the website or look up the URL
• Malware Domain List: Looks up recently-reported malicious websites
• MalwareURL: Looks up the URL in its historical list of malicious websites
• McAfee TrustedSource: Presents historical reputation data about the website
• MxToolbox: Queries multiple reputational sources for information about the IP or domain
• Open Threat Exchange: Presents diverse threat intelligence data from AlienVault
• PassiveTotal: Presents passive DNS and other threat intelligence data
• Pulsedive: Presents historical data and queries for additional information
• Quttera ThreatSign: Scans the specified URL for the presence of malware
• Reputation Authority: Shows reputational data on specified domain or IP address
• Scamadviser: Checks whether the website is likely a shopping scam
• SecurityTrails: Provides current and historical domain or system data
• Sucuri SiteCheck: Scans the URL for malware in real-time and looks it up in several blacklists
• Talos Reputation Lookup: Presents historical reputation data about the website
• Trend Micro Site Safety Center: Presents historical reputation data about the website
• ThreatSTOP Check IoC: Looks up the UP or domain in a blacklist (requires your email address)
• Unmask Parasites: Looks up the URL in the Google Safe Browsing database
• urlscan.io: Examines the URL in real time and displays the requests it issues to render the page
• URLVoid and IPVoid: Looks up the URL or IP in several blacklisting services
• VirusTotal: Looks up the URL in several databases of malicious sites
• ThreatMiner: Presents diverse threat intelligence data
• WebPulse Site Review: Looks up the website in BlueCoat's database
• Zscaler Zulu URL Risk Analyzer: Examines the URL using real-time and historical techniques
• zveloLive: Looks up the website in its database of categories